This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft File: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft (raw, json) Hash identifier: PlEQge+hkIRs1wN/mCCIxb8KUDmhjITlEFen7una8hs= Subject key identifier: 1C:82:99:B1:68:6D:BE:01:54:63:33:DA:72:05:7A:52:25:E4:48:A4 Authority key identifier: 69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 Certificate issuer: /CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Certificate serial: 03EFE601668DC6DB656BCF74C19AA1A2E244F8AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft Manifest number: 023B Signing time: Sat 13 Dec 2025 22:01:29 +0000 Manifest this update: Sat 13 Dec 2025 21:56:29 +0000 Manifest next update: Wed 17 Dec 2025 01:11:29 +0000 Files and hashes: 1: 3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (hash: VeN/bGOYLWRy+rz86CsEUNPZS6zxON2N9UHaLIP5nig=) 2: 3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa (hash: mN0twBIDnpakC8HUHafkf1WXSP1Z0ySHIU0xGnkB28I=) 3: 69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl (hash: awt5X5WHvXkACqx5hMtKYIrvxY85H2NNdhwuz+/YWZc=) 4: 3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa (hash: VhmM6dwj6jhcWpHKGkB8nHv6O88nIuiPwR83QLa+WS8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Dec 2025 01:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:ef:e6:01:66:8d:c6:db:65:6b:cf:74:c1:9a:a1:a2:e2:44:f8:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69945C3869B3E429D4B0AECEDF9999EA5DAEE429 Validity Not Before: Dec 13 21:56:29 2025 GMT Not After : Dec 17 01:11:29 2025 GMT Subject: CN=1C8299B1686DBE01546333DA72057A5225E448A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:84:1e:ef:ba:2f:2b:c3:39:5f:6d:8b:1b:3b: 9c:7a:dc:47:7c:7e:50:43:a6:cd:9c:d4:fd:6c:7a: 7e:2c:9d:c3:d0:80:31:ca:9a:83:0e:04:68:c4:a3: ce:c9:a3:04:8f:f7:ea:13:c1:02:5b:0c:a4:fd:c5: ce:13:14:16:63:25:df:3f:ad:a5:23:0b:ee:15:78: 17:36:40:29:5e:bc:94:03:cf:77:be:e6:8e:fd:b6: f2:05:28:b1:2a:89:65:3d:a3:93:50:77:20:56:3b: 32:2a:9a:3f:5a:88:e9:f0:26:e7:3e:83:d0:e2:ca: a5:ab:3d:0a:8d:f2:93:7d:56:0b:30:90:d6:2c:df: aa:24:8e:a1:e1:85:45:2b:fe:56:4f:5d:ee:6c:9f: 01:15:41:57:eb:16:2f:41:eb:b3:0c:d9:f2:ea:68: 55:5b:f7:7a:7c:f4:fc:cf:cc:27:c4:cd:49:44:cf: b1:39:a9:1c:57:b5:80:bd:8f:94:7d:82:9e:27:f3: 27:3f:8b:ad:6c:03:59:ac:27:52:f1:3b:5d:3b:6b: 2c:b8:14:be:f8:53:a4:25:c9:5b:8d:2e:fa:32:00: 37:39:95:b6:40:3f:af:8a:bc:4b:20:29:68:03:c3: c7:ec:0e:71:64:89:eb:a4:1a:fe:29:c1:03:3d:18: 4c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:82:99:B1:68:6D:BE:01:54:63:33:DA:72:05:7A:52:25:E4:48:A4 X509v3 Authority Key Identifier: keyid:69:94:5C:38:69:B3:E4:29:D4:B0:AE:CE:DF:99:99:EA:5D:AE:E4:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/69945C3869B3E429D4B0AECEDF9999EA5DAEE429.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:1e:ed:eb:12:b6:d7:a7:de:e2:0d:84:ea:e8:dc:9d:96:19: cf:62:86:26:24:65:28:5c:0f:f9:fa:c6:99:94:ef:46:de:05: af:52:5e:22:9e:54:e3:bf:e7:45:58:47:9e:94:7d:a9:b3:85: 8b:33:cb:17:2a:53:dd:67:7d:6a:b6:a7:82:14:6a:53:c1:b1: e5:bc:2c:2b:e6:59:9f:67:32:78:25:35:4f:47:89:aa:d1:ec: 3c:cb:d0:04:78:00:15:f1:a5:b4:dd:9a:71:59:f9:35:4a:0f: 56:69:95:da:fe:f3:1f:3f:aa:cf:d3:7b:fa:c8:72:91:1c:63: 22:ac:b2:74:a8:3d:9b:b1:e3:ec:56:dc:03:2f:8f:a0:86:7d: 54:9b:2c:bc:0c:ce:94:a2:c1:98:f1:5f:4a:4d:6c:50:a4:68: 4c:5a:00:86:24:d1:7a:50:14:16:e7:7b:75:52:5e:89:d8:92: 7a:d4:3f:91:c1:a5:76:2f:88:87:58:e2:84:ff:63:0b:4a:fb: ef:78:19:98:d9:de:82:fc:17:e9:62:5c:f3:e9:34:09:0f:c2: 43:44:e3:ce:94:68:e4:4b:6d:b9:dd:f5:7c:e2:52:64:45:2e: 46:a0:02:7b:19:ef:d8:62:54:02:e2:ad:92:fc:a4:74:07:9f: 7b:80:26:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA+/mAWaNxttla890wZqhouJE+KowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1 REFFRTQyOTAeFw0yNTEyMTMyMTU2MjlaFw0yNTEyMTcwMTExMjlaMDMxMTAvBgNV BAMTKDFDODI5OUIxNjg2REJFMDE1NDYzMzNEQTcyMDU3QTUyMjVFNDQ4QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuhB7vui8rwzlfbYsbO5x63Ed8 flBDps2c1P1sen4sncPQgDHKmoMOBGjEo87JowSP9+oTwQJbDKT9xc4TFBZjJd8/ raUjC+4VeBc2QClevJQDz3e+5o79tvIFKLEqiWU9o5NQdyBWOzIqmj9aiOnwJuc+ g9DiyqWrPQqN8pN9VgswkNYs36okjqHhhUUr/lZPXe5snwEVQVfrFi9B67MM2fLq aFVb93p89PzPzCfEzUlEz7E5qRxXtYC9j5R9gp4n8yc/i61sA1msJ1LxO107ayy4 FL74U6QlyVuNLvoyADc5lbZAP6+KvEsgKWgDw8fsDnFkieukGv4pwQM9GEw1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHIKZsWhtvgFUYzPacgV6UiXkSKQwHwYDVR0j BBgwFoAUaZRcOGmz5CnUsK7O35mZ6l2u5CkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ODMxZWViNC1mMzU3LTQ1YTctOTI2NS00MjhiMDA3YTAyNzAvMC82OTk0NUMzODY5 QjNFNDI5RDRCMEFFQ0VERjk5OTlFQTVEQUVFNDI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5RUE1REFF RTQyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTgzMWVlYjQtZjM1Ny00NWE3LTky NjUtNDI4YjAwN2EwMjcwLzAvNjk5NDVDMzg2OUIzRTQyOUQ0QjBBRUNFREY5OTk5 RUE1REFFRTQyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMe7esStten3uINhOro3J2WGc9ihiYkZShc D/n6xpmU70beBa9SXiKeVOO/50VYR56UfamzhYszyxcqU91nfWq2p4IUalPBseW8 LCvmWZ9nMnglNU9HiarR7DzL0AR4ABXxpbTdmnFZ+TVKD1Zpldr+8x8/qs/Te/rI cpEcYyKssnSoPZux4+xW3AMvj6CGfVSbLLwMzpSiwZjxX0pNbFCkaExaAIYk0XpQ FBbne3VSXonYknrUP5HBpXYviIdY4oT/YwtK++94GZjZ3oL8F+liXPPpNAkPwkNE 486UaORLbbnd9XziUmRFLkagAnsZ79hiVALirZL8pHQHn3uAJnE= -----END CERTIFICATE-----Generated at Mon Dec 15 21:54:30 2025 by rpki-client